Static task
static1
Behavioral task
behavioral1
Sample
3ec2292dc5be0161d25f258f716d92e96c591ab084548679dd7b169f80b2e967.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
3ec2292dc5be0161d25f258f716d92e96c591ab084548679dd7b169f80b2e967.exe
Resource
win10v2004-20230220-en
General
-
Target
3ec2292dc5be0161d25f258f716d92e96c591ab084548679dd7b169f80b2e967
-
Size
461KB
-
MD5
a2aefb7ab6c644aa8eeb482e27b2dbc4
-
SHA1
0dca85d00502ed5ddd1e3a1d4cb8a95e3d2e38df
-
SHA256
3ec2292dc5be0161d25f258f716d92e96c591ab084548679dd7b169f80b2e967
-
SHA512
47c1753faf1584e0e35a806050ce7c5fcff14a9758b6c7940d45bb90401cb5ba0c6b0c77b73cce8e0ac3cf685226eddb60583c7b1a3807516321a70094e452f8
-
SSDEEP
6144:4bozHqJwI+iru1rjsB/X+2xPuTSTy+0XY1e6fD+XjlyI/azy1Jt3cXMwd:4bYHqJwI+Mu1rjMX+YTSYtLuJJLwd
Malware Config
Signatures
Files
-
3ec2292dc5be0161d25f258f716d92e96c591ab084548679dd7b169f80b2e967.exe windows x64
cc2269b4f6a11e02b40a384e27ad5e8c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetDriveTypeW
MoveFileW
GlobalAlloc
GlobalFree
Sleep
WriteConsoleW
CreateFileW
HeapReAlloc
HeapSize
GetVolumeInformationW
GetConsoleCP
FlushFileBuffers
AcquireSRWLockShared
SetStdHandle
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
MultiByteToWideChar
GetCPInfo
GetOEMCP
GetACP
DeleteFileW
GetLocalTime
GlobalUnlock
GlobalLock
lstrlenW
CloseHandle
WriteFile
ExitProcess
ReleaseSRWLockExclusive
ReleaseSRWLockShared
GetConsoleMode
AcquireSRWLockExclusive
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
SetFilePointerEx
InitializeSRWLock
GetCurrentProcess
CreateProcessW
GetStartupInfoW
FormatMessageW
HeapAlloc
GetStringTypeW
HeapFree
LCMapStringW
CompareStringW
GetFileType
GetCommandLineW
GetCommandLineA
GetStdHandle
ExitThread
GetModuleHandleExW
RtlUnwindEx
LoadLibraryW
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
ReleaseSemaphore
DuplicateHandle
VirtualFree
VirtualProtect
VirtualAlloc
GetVersionExW
RtlPcToFileHeader
EncodePointer
DecodePointer
RaiseException
QueryPerformanceCounter
QueryPerformanceFrequency
WideCharToMultiByte
WaitForSingleObjectEx
SwitchToThread
GetCurrentThreadId
GetExitCodeThread
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetTickCount
GetModuleHandleW
GetProcAddress
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetCurrentProcessId
InitializeSListHead
CreateTimerQueue
SetEvent
SignalObjectAndWait
CreateThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetCurrentThread
GetThreadTimes
FreeLibrary
FreeLibraryAndExitThread
GetModuleFileNameW
GetModuleHandleA
LoadLibraryExW
RtlUnwind
user32
GetAsyncKeyState
GetKeyState
OpenClipboard
GetClipboardData
CloseClipboard
GetForegroundWindow
GetCursorInfo
GetDesktopWindow
GetDC
EnumDisplayMonitors
ReleaseDC
GetWindowInfo
PtInRect
GetIconInfo
GetWindowTextW
gdi32
DeleteObject
RealizePalette
SelectPalette
GetStockObject
MaskBlt
BitBlt
SelectObject
CreateCompatibleBitmap
GetDIBits
GetObjectW
CreateCompatibleDC
DeleteDC
shell32
ShellExecuteW
ole32
CoUninitialize
CreateStreamOnHGlobal
CoInitialize
ws2_32
select
htons
inet_addr
getpeername
__WSAFDIsSet
inet_ntop
htonl
sendto
getsockname
bind
socket
recvfrom
setsockopt
gethostbyname
inet_ntoa
ntohs
accept
gdiplus
GdipGetImageEncoders
GdiplusStartup
GdiplusShutdown
GdipFree
GdipAlloc
GdipDisposeImage
GdipLoadImageFromStream
GdipCloneImage
GdipSaveImageToStream
GdipGetImageEncodersSize
Sections
.text Size: 322KB - Virtual size: 321KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 106KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ